Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          s9gRfJz0zkZMooXsvqNXnmTxp5uv59z//im5F5A1qmU=
Subject key identifier:   8B:45:20:52:D7:7F:72:8B:8C:E6:31:39:62:07:25:0B:C7:8C:DA:28
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       0193512BCA96386309306CDA045C046837E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          1375
Signing time:             Fri 22 Nov 2024 00:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:44 +0000
Files and hashes:         1: DWUG66fFz-tva3IV1AIOt_XglVo.roa (hash: cw0FLpXOdkucLVqG+he+FkBhBoW8gO03GJBq/a2yGAo=)
                          2: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: yLruAR3TBb/lcHeq2DzNoJ+Yn1ACxqtBBqa2yAthGRg=)
                          3: i3Jx9L0N2q2hPO-ZHz-MkhbEzkI.roa (hash: xzn7g70HXE+tF45Ss2soz1uJq0GT+p4fuwVAx//Pdl8=)
                          4: yiH1CPRLoK24oFC8HqS2Wv99nzE.roa (hash: JIKe6pS70ZKmwsbr/nLLmBL5vdgiIusftWMcFuSKTEU=)
                          5: z_OSxH5iGsT8eyHBWAB4PlAaBdg.roa (hash: B/qNXskgn5/9s9mRL5WbSNv4Af6gElvNCX0khONc9Tk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:ca:96:38:63:09:30:6c:da:04:5c:04:68:37:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Nov 22 00:00:44 2024 GMT
            Not After : Nov 23 00:00:44 2024 GMT
        Subject: CN=8b452052d77f728b8ce631396207250bc78cda28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:04:4c:cc:21:09:27:0b:e4:76:59:d6:1b:8f:
                    3e:4b:ae:bf:6a:58:0b:d7:b5:ca:f2:b7:5f:87:f7:
                    49:57:43:b1:58:be:73:34:e6:88:f7:57:ac:da:fc:
                    9e:47:12:b2:ef:99:a2:22:d3:07:b8:4c:1e:bd:88:
                    75:a0:38:1b:01:f6:d0:ad:86:26:7a:89:85:31:d8:
                    6c:a8:ab:4e:a9:8e:1c:8b:6c:e1:87:3d:3e:9a:34:
                    85:ae:24:d6:e7:f9:40:58:15:b6:1b:be:58:76:44:
                    30:dc:06:2d:ba:dc:ee:ae:84:8c:aa:9b:e3:21:ff:
                    04:62:3f:a3:b4:1d:36:ba:fe:a1:c1:7e:28:9e:bf:
                    af:cf:d5:8d:16:39:42:e2:e6:65:e4:83:da:81:9c:
                    9f:7c:4a:dd:43:84:00:00:cc:5f:68:2b:a9:45:31:
                    e6:ac:1e:b7:8d:6f:d9:a1:bc:a2:2e:67:63:c1:54:
                    85:1f:c5:62:45:3e:ad:c8:67:1e:8b:1c:30:78:f5:
                    25:cc:d8:73:84:f3:4b:b7:82:be:3b:e2:c0:79:bd:
                    3c:d0:37:08:04:97:4a:e6:32:96:f9:ff:39:a9:e4:
                    57:00:fd:5f:e0:d2:ac:0d:a8:ed:b5:b9:38:2a:f6:
                    2d:17:72:25:c2:1e:23:8d:e3:68:f0:d7:5a:1a:8e:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:45:20:52:D7:7F:72:8B:8C:E6:31:39:62:07:25:0B:C7:8C:DA:28
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4c:44:14:0c:16:a8:a2:ca:78:28:dd:4d:d5:99:90:21:ca:
         d8:ba:ff:13:15:8a:a5:5b:b9:37:f1:be:a7:2b:d9:2c:28:7d:
         d4:2a:dd:4f:47:a6:1a:75:c1:72:b5:99:72:db:fb:f4:62:69:
         1d:27:ae:38:1d:b3:50:a6:13:0a:d2:93:ea:70:4a:a0:b7:00:
         6a:cb:8b:6d:dc:d9:fc:66:39:94:ff:04:5b:f6:a7:00:7b:d8:
         f2:f3:0c:7f:c3:f9:9f:68:94:29:69:b4:63:c6:d9:52:8f:e6:
         05:66:0a:aa:63:4c:49:fe:3d:3f:5e:7f:17:65:f5:5d:91:fa:
         fb:e9:44:93:37:3f:f7:ad:e3:c2:95:b0:05:9b:98:fa:af:e7:
         a4:a8:60:91:e1:ad:a5:56:bc:e0:e4:71:7a:1a:bd:b2:ea:60:
         b5:28:13:e7:9b:c1:c8:d5:7e:a5:b7:20:9d:f4:75:d3:d2:ed:
         94:d6:9d:53:9f:d8:a7:b4:0b:6f:87:e1:29:99:4e:fd:07:e5:
         5f:64:f8:04:e6:04:8c:65:26:75:bc:7b:f7:77:89:80:27:ee:
         f8:8a:30:2e:29:de:eb:f9:aa:74:a3:96:e3:0f:fd:4c:29:60:
         9d:5c:8c:8d:7c:8e:d5:9c:4d:0e:cd:d7:29:38:e1:e9:50:c6:
         2e:0b:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:41:01 2024 by rpki-client on console-fra.rpki-client.org